1abadd0f64bd3e8960e8f7c66e7aaf040ed6bf3a208de9a0601dcb45dfbfe206

Analysis

max time kernel
188s
max time network
199s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 10:10

Target

1abadd0f64bd3e8960e8f7c66e7aaf040ed6bf3a208de9a0601dcb45dfbfe206.exe
Size

55KB
MD5

e04dc203e1b3113f0a91b06d7807aafe
SHA1

b434b4fd6648eb90f65a1a048a8bcaea2b46ea10
SHA256

1abadd0f64bd3e8960e8f7c66e7aaf040ed6bf3a208de9a0601dcb45dfbfe206
SHA512

d33cffc0ef1b34ea92ab2f89319b91c51beb0c96e9df7ebd989d62750cdc05cc582d7bfaa6c18592222b6e38c6bc294cca7748f7b28017f34340fd9b7a4b509c
SSDEEP

768:zIPfXOhlKoLxtCt74y/842kGim5admgS0CX0M0t9d6ww92Z9TZ8K7q7653xxq78b:4CKoLD+h/84UimkdxMQr632XVd5BHzTJ

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
364	1abadd0f64bd3e8960e8f7c66e7aaf040ed6bf3a208de9a0601dcb45dfbfe206.exe
364	1abadd0f64bd3e8960e8f7c66e7aaf040ed6bf3a208de9a0601dcb45dfbfe206.exe
364	1abadd0f64bd3e8960e8f7c66e7aaf040ed6bf3a208de9a0601dcb45dfbfe206.exe
364	1abadd0f64bd3e8960e8f7c66e7aaf040ed6bf3a208de9a0601dcb45dfbfe206.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 364 wrote to memory of 2724	364	1abadd0f64bd3e8960e8f7c66e7aaf040ed6bf3a208de9a0601dcb45dfbfe206.exe	57
PID 364 wrote to memory of 2724	364	1abadd0f64bd3e8960e8f7c66e7aaf040ed6bf3a208de9a0601dcb45dfbfe206.exe	57
PID 364 wrote to memory of 2724	364	1abadd0f64bd3e8960e8f7c66e7aaf040ed6bf3a208de9a0601dcb45dfbfe206.exe	57
PID 364 wrote to memory of 2724	364	1abadd0f64bd3e8960e8f7c66e7aaf040ed6bf3a208de9a0601dcb45dfbfe206.exe	57

memory/364-132-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/364-134-0x0000000000400000-0x0000000000408960-memory.dmp

Filesize
34KB

Download
memory/364-135-0x0000000010000000-0x0000000010013000-memory.dmp

Filesize
76KB

Download
memory/2724-133-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download